Previous Topic: Migrate or Export SSL Keys and Certificates

Next Topic: Error and Audit Logging

SSL Migration Tool Command Arguments

The migratessl tool is invoked at the command line. When entering a command:

Command Argument

Meaning

-op

Migrate or Export

Default: Migrate

When exporting for Apache, the tool exports a server.key file and a server.crt file, if you specify the -certfile argument. For Tomcat, the tool exports a tomcat.p12 file, which is a PKCS#12 key/cert file.

-keytype

Apache or Tomcat

Default: Apache

-sourcefile

Name of the file containing the SSL key (Apache) or the key store containing the key and certificate (Tomcat).

-certfile

Name of the file containing the Apache SSL server certificate (Apache only).

-sourcever

Federation Manager version the key or certificate comes from, such as 12.0, 12.1.

Default: 12.0

-sourceos

Operating system of the environment the key comes from, Windows or UNIX.

Note: There is no Linux option because Linux support was introduced in r12.1 SP3.

Default: The OS of the machine where the tool is being run.

-dest

Path to the folder for output files. This option is ignored for migration.

Default for Export: Current folder

Important! If you do not specify a destination folder, the files that you are migrating are overwritten.

-issueralias

The alias of the CA certificate that signed the certificate you are migrating.

Import the CA certificate under this alias to the destination Federation Manager system. (Used only for Migrate; ignored for Export.)

-oldpwd

The Federation Manager administrative password of the system that is the source of the key.

-newpwd

The Federation Manager administrative password of the system to which the key is being moved.

-h

Displays these usage instructions.

-help

Displays these usage instructions.

-?

Displays these usage instructions.